Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa
File: 38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa (raw, json)
Hash identifier: 7hfZdVHc1Atql21VDNubuLTzBJkujgMT4Gd0eGlt6GU=
Subject key identifier: C6:BC:7C:18:80:68:DF:5F:C8:A1:B8:CC:FF:6C:D7:97:FC:9C:2A:DF
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584830415D1A7B48CF54F8E51A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa
Signing time: Fri 13 Dec 2024 02:57:23 +0000
ROA not before: Fri 13 Dec 2024 02:57:23 +0000
ROA not after: Thu 13 Mar 2025 01:57:23 +0000
asID: 13335
IP address blocks: 172.71.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:41:5d:1a:7b:48:cf:54:f8:e5:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:57:23 2024 GMT
Not After : Mar 13 01:57:23 2025 GMT
Subject: CN=cce9a59a-865a-4bb2-b045-589810af4457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:08:b3:81:0a:11:23:69:0d:29:10:79:fe:
21:c5:d1:48:3f:c0:b7:30:06:2b:ca:06:f9:0d:bf:
d9:7f:95:02:f4:7a:b4:c4:cc:77:cf:03:f0:4c:44:
64:6f:70:a5:55:eb:e3:4d:af:ad:4d:f3:60:bc:bc:
43:46:cd:c6:16:95:9b:b7:02:bb:8e:fd:64:a4:80:
d5:f0:e2:f0:96:25:87:ce:9e:31:8a:06:fe:14:92:
7a:bd:c4:cd:aa:5f:49:bd:84:15:27:84:cc:3e:c2:
c7:e2:ab:67:bf:a1:6a:16:3b:2e:af:e1:f3:d6:31:
bd:63:d9:6c:1b:af:33:60:fc:4f:ae:fa:a5:31:0f:
29:b9:63:4c:24:11:96:8e:cf:ec:72:08:c3:1b:21:
c9:86:a1:4b:a0:d8:6d:a2:fc:c7:ab:19:13:cb:17:
b6:28:80:45:9a:d9:65:e0:d8:68:3c:73:51:9b:bd:
97:e7:71:a8:2b:ea:35:ab:44:39:da:a2:9a:f3:82:
30:1c:c9:f5:64:af:f1:b1:5b:58:cd:9a:86:87:12:
f4:9d:08:81:8f:47:31:b9:d1:54:10:66:a7:83:2c:
8d:11:d3:24:ab:58:f8:d2:0d:2d:97:a9:30:03:5d:
e3:4d:f4:c1:bb:32:80:81:eb:6b:8f:fb:4c:6f:57:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BC:7C:18:80:68:DF:5F:C8:A1:B8:CC:FF:6C:D7:97:FC:9C:2A:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:a1:7f:bb:87:80:ec:58:b8:9b:38:59:14:71:93:0f:56:40:
99:9f:b5:d1:b6:77:13:2c:f4:e8:25:f4:12:fb:19:81:3f:9d:
e6:f7:6c:5c:0b:03:f0:cd:d0:1b:65:77:a3:30:d7:90:c2:5e:
63:0f:f4:9f:0e:c4:b4:1a:5a:71:71:e0:19:68:45:d8:0b:7f:
bd:2b:d8:dc:5b:08:e3:98:7d:f7:71:4b:9d:b6:76:8a:d6:bf:
d3:a4:25:d2:db:9d:e7:eb:74:92:15:e7:1e:d5:72:06:99:df:
b6:50:eb:e3:cd:2e:39:a3:5c:0e:a0:97:01:ab:0a:5d:3e:70:
54:4b:ca:e8:94:74:c7:66:45:32:63:ec:0e:0d:37:a6:d2:df:
48:b1:fb:29:42:eb:78:01:c6:37:37:83:a7:7b:44:54:79:1d:
ff:da:8a:9a:6b:24:6e:41:2e:ea:21:51:7e:21:5d:7b:50:7a:
05:b9:a8:ea:1c:5d:a4:7b:6d:9d:f8:61:b6:ac:35:9a:6e:ad:
d4:b4:56:6e:43:f1:ec:d5:00:41:50:e4:93:ca:00:5e:2b:f2:
b7:27:2a:4b:f7:d3:c2:0a:19:e4:22:39:0f:6c:3f:91:8d:dd:
ba:00:53:21:8b:46:a6:d4:c3:53:f6:f9:3b:cf:20:75:f1:46:
98:32:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:15 2025 by rpki-client